An autonomous framework for early detection of spoofed flooding attacks

International Journal of Network Security

Volumn 10, Issue 1, 2010, Pages 39-50

  Subramanian, Malliga ^a   Angamuthu, Tamilarasi ^a  

^a KONGU ENGINEERING COLLEGE   (India)

Author keywords

DDoS; DoS; Flooding; Information entropy; Theory of evidence; Traffic profiling

Indexed keywords

DDOS; DENIAL OF SERVICE; DYNAMIC NETWORK; FLOODING ATTACKS; INFORMATION ENTROPY; SOURCE-END DEFENSE; THEORY OF EVIDENCE; TRAFFIC PROFILING;

DOS; NETWORK SECURITY; OIL WELL FLOODING; SAFETY ENGINEERING;

FLOODS;

EID: 80054075678     PISSN: 1816353X     EISSN: 18163548     Source Type: Journal    
DOI: None     Document Type: Article

References (23)

1. A. Belenky, and N. Ansari, "IP traceback with deterministic packet marking," IEEE Communications Letter, vol. 7, pp. 162-164, Apr. 2003
2. CERT Coordination Center, Denial of Service Attacks. (http://www.cert.org/tech-tips/denial-ofser-vice.html)
3. P. Ferguson, and D.Senie, Network Ingress Filtering: Defeating Denial of Service Attacks which Employ IP Source Address Spoofing, RFC 2827, May 2000.
4. S. Floyd, and V. Jacobson, "Random early detection gateways for congestion avoidance," IEEE/ACM Transactions on Networking, vol. 1, no. 4, pp. 397-413, Aug. 1993.
5. T.M. Gil, and M. Poletter, "MULTOPS: A data structure for bandwidth attack detection," Proceedings of USENIX Security Symposium, pp. 23-38, Aug. 2001.
6. Internet Traffic Archive, BC Traces and LBL-PKT Traces. (http://ita.ee.lbl.gov/html/contrib/BC.html and http://ita.ee.lbl.gov/html/contrib/LBL-PKT.html)
7. J. Jung, B. Krishnamoorthy, and M. Rabinovich, "Flash crowds and denial of service attacks: Characterization and implications for CDNs and web sites," Proceedings of 11th World Wide Web Conference, pp. 293-304, May 2002.
8. A. Kulkarni and S. Bush, "Detecting distributed denial-of-service attacks using Kolmogorov complexity metrics," Journal of Network and Systems Management, vol. 14, no. 1, Mar. 2006.
9. J. Kurian and K. Sarac, "Defending network-based services against denial of service attacks," International Journal of Network Security, vol. 9, no. 2, pp. 186-200, 2009.
10. M. C. Lee, Y. J. He, and Z. Chen, "Towards improving an algebraic marking scheme for tracing DDoS attacks," International Journal of Network Security, vol. 9, no. 3, pp. 204-213, 2009.
11. S. Liu, Y. Xiong and P. Sun, "On prevention of the denial of service attacks: A control theoretical approach," IEEE Systems, Man and Cybernetics, Information Assurance and Security Workshop, West Point, New York, June 2000.
12. D. McGuire, and B. Krebs, "Attack on internet called largest ever," Oct. 2002. (http://washingtonpost.com/wp-dyn/articles/A828-2002Oct22.html)
13. J. Mirkovic, and P. Reiher, "D-WARD: A source-end defense against flooding denial-of-service attacks," IEEE Transactions on Dependable and Secure Computing, vol. 2, no. 3, pp. 216-232, July 2005.
14. J. Mirkovic, D-WARD: DDoS Network Attack Recognition and Defense, Ph.D. Dissertation Prospectus, Computer Science Department, University of California, Los Angeles, Jan. 2002.
15. P. Mittal, Defense against Distributed Denial of Service Attacks, A seminar report, IIT, Guwahati, India, 2005.
16. National Laboratory for Applied Network Research, NLANR Packet Traces. (http://pma.nlanr.net/Traces/traces/long)
17. S. Savage, D.Wetherall, A. Karlin, and T. Anderson, "Practical network for IP traceback," IEEE/ACM Transactions on Networking, vol. 9, no. 3, pp. 226-237, June 2001.
18. C. Siaterlis, and B. Maglaris, "Towards multisensor data fusion for DoS detection," Proceedings of SAC' 04, pp. 439-446, Nicosia, Cyprus, Mar. 2004.
19. A. C. Snoren, C. Partridge, L. A. Sanchez, C. E. Jones, F. Tchakountio, B. Schwartz, S. T. Kent, and W. T. Strayer, "Single-packet IP traceback," IEEE/ACM Transactions on Networking, vol. 10, no 6, pp. 721-734, Dec. 2002.
20. T. Peng, C. Leckie, and K. Ramamohanarao, Detecting Distributed Denial of Service Attacks using Source IP Monitoring, Draft, Nov. 2002.(http://citeseer.ist.psu.edu/peng02detecting.html)
21. T. Peng, C. Leckie, and K. Ramamohanarao, "Pro-tection from distributed denial of service attacks using history-based filtering," Proceedings of ICC 2003, pp. 11-15, Anchorage, Alsaka, USA, Aug. 2003.
22. H. Wang, D. Zhang, and K. G. Shin, "Detecting SYN flooding attacks," Proceedings of Annual Joint Conference of IEEE Computer and Communications Societies (INFOCOM), vol. 3, pp. 1530-1539, June 2002.
23. B. Xiao, W. Chen, and Y. He, "A novel approach for detecting DDoS attacks at an early stage," Journal on Supercomputing, vol. 36, pp. 235-248, 2006.